Behavioral task
behavioral1
Sample
3e19715b1f384a5d84913694464a629584c97ea6dbc823ce8fbb5fdd0e92dddb.exe
Resource
win7-20240221-en
General
-
Target
3e19715b1f384a5d84913694464a629584c97ea6dbc823ce8fbb5fdd0e92dddb
-
Size
417KB
-
MD5
76febc6bf79dfbb8d0e87cf66fc48a62
-
SHA1
1f503d09217108c7e6f480cfb723abef8e5cbd53
-
SHA256
3e19715b1f384a5d84913694464a629584c97ea6dbc823ce8fbb5fdd0e92dddb
-
SHA512
b2bc959e4095c8bbdf09a2da5ee7205e885cc66aa1a72d1bae3dba99a8740560622563553f8d99549d368621af5e847c95176923af8c0f8ee504a75a7f9d7630
-
SSDEEP
6144:TzU7blK2P2iCWhWapKRaRXOkN4Swel6f3IsIZOmoF:vU7M1ijWh0XOW4sEf4O3
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e19715b1f384a5d84913694464a629584c97ea6dbc823ce8fbb5fdd0e92dddb
Files
-
3e19715b1f384a5d84913694464a629584c97ea6dbc823ce8fbb5fdd0e92dddb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE